Who we are

Pūtake Labs is a decision intelligence, assurance and simulation practice led by Steve Wilson. We are based in Taranaki, New Zealand and work with organisations across New Zealand and Australia.

Pūtake Labs sits within the wider Changeable ecosystem. Specialist associates may be brought into an engagement where the scope requires additional expertise, subject to appropriate confidentiality and engagement arrangements.

Contact: kiora@putakelabs.co.nz

What information we collect

We may collect the following types of information in the course of our work:

• Contact information, including name, email, phone number and organisation, provided through our enquiry form or direct communication
• Organisational information shared during engagements, including documents, data, process descriptions, decision material, risk information and stakeholder information
• Information required to deliver decision intelligence, assurance, simulation, advisory and implementation support
• Website analytics data via Google Analytics, including pages visited, time on site and referral source
• Email marketing data via Brevo, including subscription status, open rates and click behaviour

How we use information

Information is used to:

• Respond to enquiries and assess whether Pūtake Labs is the right fit
• Scope and deliver decision intelligence, assurance, simulation and advisory engagements
• Produce analysis, recommendations and deliverables as part of agreed work
• Apply the Pūtake Labs method, including evidence testing, risk trajectory analysis and recommendation development
• Send relevant communications to subscribers who have opted in
• Improve our website, services, systems and client experience

Indirect collection of personal information

In some engagements, personal information may be provided to Pūtake Labs by a client organisation rather than directly by the individual concerned. This may occur where engagement material includes organisational documents, stakeholder information, process evidence, decision records or operational data.

Where the New Zealand Privacy Act 2020 requires notification for indirect collection, we work with the client to determine appropriate notice, governance, consent, access and use arrangements for the engagement.

AI-supported analysis

Pūtake Labs uses AI-supported tools to assist with analysis, synthesis, simulation and decision support as part of its decision intelligence method. Client information may be processed through AI tools during engagements where appropriate to the scope of work. The use of AI is governed by our Responsible AI Policy.

Key principles:

• AI is a capability we apply, not a product we sell
• Human judgement remains responsible for all recommendations and outputs
• We do not submit client information for the purpose of training AI models
• Client information is handled in accordance with engagement agreements, confidentiality obligations and agreed data handling settings
• Where Māori interests, Māori data, mātauranga Māori or Te Tiriti obligations are in scope, the Kaupapa Methodology Module is activated as part of the engagement method

Data storage and security

Information is stored using industry-standard cloud services including Google Workspace, Supabase and Notion, along with other approved business systems where required for delivery. We take reasonable steps to protect information from unauthorised access, loss or misuse.

We do not sell, rent or trade personal or organisational information to third parties.

Confidentiality and engagement information

Client documents, decision material, stakeholder information, business data and other engagement information are treated as confidential unless otherwise agreed. Access is limited to people and systems required to deliver the work.

Where specialist associates are involved, access to information is limited to the scope of their role and subject to appropriate confidentiality expectations.

Data sovereignty

We recognise the importance of data sovereignty, particularly for Māori and Indigenous communities. Where engagements involve culturally significant, Māori, Indigenous or community-held data, we work with clients to establish appropriate governance, storage, access and use arrangements as part of the engagement scope.

Where Māori data is involved, we take account of Māori data sovereignty principles, including guidance from Te Mana Raraunga, alongside the specific governance requirements of the engagement.

Email marketing

We use Brevo for email communications. You can unsubscribe at any time using the link in any email. We do not share subscriber lists with third parties.

Website analytics

We use Google Analytics 4 to understand how visitors use our website. This data is used to improve the site. We do not use website analytics to identify individual visitors.

Your rights

Under the New Zealand Privacy Act 2020, you have the right to request access to personal information we hold about you and to request correction of personal information you believe is wrong, incomplete or misleading.

You can also ask us to delete information where appropriate, withdraw consent for email communications at any time, or ask a question about how your information is handled.

To exercise any of these rights, contact us at kiora@putakelabs.co.nz.

Privacy contact

Privacy questions, access requests, correction requests and data handling questions should be sent to kiora@putakelabs.co.nz.

We will take reasonable steps to respond to privacy requests in accordance with the New Zealand Privacy Act 2020 and any applicable engagement terms.

Third-party services

We use the following third-party services in the course of our work:

• Google Workspace, for email, documents and calendar
• Brevo, for email marketing
• Google Analytics, for website analytics
• Supabase, for data infrastructure
• Notion, for project management and internal documentation
• AI tools including Anthropic Claude and OpenAI, for analysis support where appropriate to the engagement

Each service has its own privacy policy. We select services that meet reasonable standards for data protection and only use them where appropriate to the purpose of the work.

Links to related policies

This Privacy Policy should be read alongside the Pūtake Labs Responsible AI Policy. Where a client engagement includes specific confidentiality, data handling or governance requirements, those engagement terms apply alongside this policy.

You can also read more about how Pūtake Labs works through How We Work and The Labs.

Changes to this policy

This policy may be updated from time to time. The current version will always be available at this page.

Last updated: July 2026.